"The universities admissions service, Ucas, broke data protection rules when it signed up teenagers to receive adverts about mobile phones, energy drinks and other products, the information commissioner has ruled."